MAL-2023-2102
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pythn-binance/MAL-2023-2102.json
- JSON Data
- https://api.osv.dev/v1/vulns/MAL-2023-2102
- Published
- 2023-02-10T20:36:06Z
- Modified
- 2023-08-21T20:12:58Z
- Summary
- Malicious code in pythn-binance (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: checkmarx (fe77c21682a02e95823e7d9f20904c816a96ea19c2a96668226208402404502b)
Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet addresses
- References
- Credits
-
-
- Checkmarx - FINDER
-
Affected packages
PyPI / pythn-binance
Package
- Name
- pythn-binance
- View open source insights on deps.dev
- Purl
- pkg:pypi/pythn-binance